You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
# Identity configuration for the Dev Center resource
21
21
# Defines how the Dev Center authenticates and what permissions it has
22
22
identity:
23
-
type: "SystemAssigned"
23
+
type: UserAssigned
24
24
25
25
# Role assignments section - defines permissions for Dev Center operation
26
26
roleAssignments:
27
-
# Dev Center role assignments
28
-
# These roles control who can manage the Dev Center and its projects
29
-
# Best practice: Assign roles based on team responsibilities
30
-
# The following roles follow the principle of least privilege and best practices described in https://learn.microsoft.com/en-us/azure/dev-box/concept-dev-box-deployment-guide#organizational-roles-and-responsibilities guidance.
31
27
devCenter:
32
28
- id: "b24988ac-6180-42a0-ab88-20f7382dd24c"
33
-
name: "Contributor"# Azure Contributor role for Dev Center management
29
+
name: "Contributor"
34
30
scope: "Subscription"
35
31
- id: "18d7d88d-d35e-4fb5-a5c3-7773c20a72d9"
36
32
name: "User Access Administrator"
@@ -46,7 +42,7 @@ identity:
46
42
# Dev Manager role - for users who manage Dev Box deployments
47
43
# These users can configure Dev Box definitions but typically don't use Dev Boxes
48
44
- type: DevManager
49
-
azureADGroupId: "5a1d1455-e771-4c19-aa03-fb4a08418f22"# Azure AD group ID for Dev Managers. You must create this group in Azure AD and replace the <Azure AD group ID>, the default value in this example is "Platform Engineering Team"
name: identityProvider# Name of the virtual network
90
-
create: true# Set this parameter to true to create the network. If its value is false, the the accelerator will connect to an existing network.
91
-
resourceGroupName: "identityProvider-connectivity-RG"# Resource group for network. If the create parameter is set to false, the resource group must already exist.
92
-
virtualNetworkType: Managed# Managed network type is recommended for Dev Center projects to ensure proper connectivity and security
93
-
addressPrefixes:# Address space for the virtual network. This should be a unique CIDR block that does not overlap with other networks in your Azure subscription. If the create parameter is set to true, the accelerator will create the network with this address space.
- name: identityProvider-subnet# Subnet name. If the create parameter is set to true, the accelerator will create the subnet with this name and address prefix. If its value is false, the subnet must already exist.
92
+
- name: identityProvider-AZDO-subnet
97
93
properties:
98
-
addressPrefix: 10.0.1.0/24# Subnet address range. If the create parameter is set to true, the accelerator will create the subnet with this address range. If its value is false, the subnet must already exist.
# These roles control who can manage the project and its resources
113
-
# You must create the corresponding Azure AD groups and assign users to them
114
-
# The default values in this example are "Identity Provider Engineers"
115
-
# You can customize these values based on your organization's requirements
116
-
# The following roles follow the principle of least privilege and best practices described in https://learn.microsoft.com/en-us/azure/dev-box/concept-dev-box-deployment-guide#organizational-roles-and-responsibilities guidance.
117
107
roleAssignments:
118
-
- azureADGroupId: "67a29bc3-f25c-4599-9cb1-4da19507e8ee"# Azure AD group ID for Identity Provider Engineers. You must create this group in Azure AD and replace the <Azure AD group ID>, the default value in this example is "Identity Provider Engineers"
119
-
azureADGroupName: "Identity Provider Engineers"# Azure AD group name
0 commit comments